User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:6bdf4d570141e5f5887ddd537fcc6af4ad76318f97dd183fe97d73e05a381371
General
- Target 6bdf4d570141e5f5887ddd537fcc6af4ad76318f97dd183fe97d73e05a381371.zip
- Size 809B
- Sample260817-ndt1rayflb
- SHA256 1f3357a467ce488c3656ca81118e94f13ad317e6cd01b35b2d6fcac6c2911059
- MD5 4890a981ce479c0a8642a0c6835ff825
- SHA1 cb5337efb8febe9f56d8eed90c8946eaacb128ac
- SHA512 5a08de7b390cddaf3116abacd827c25c35a2fbabd1e6030188bb4923ec40ecc69b6e7969b4856f921d6ffb71234b9239dc9b3fdb1a7d5f0e490a10beaf84bfba
- TLSH T1620146EE7C56D446D107B535C52304E3AE3CD59854D0D811926748310DB93F85C25A3B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VJTULR.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-VJTULR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-VJTULR.lnk
- Size 1KB
- SHA256 5a6a415d7c9e2973512eb5f4af99f7d6c0bb0983ac19bb02d95acbe44cfae798
- MD5 1965f181cfe8c2b3d983b32d08dc690c
- SHA1 132911ff48385fcff154c17f6518d8b3be852775
- SHA512 f3cbfbe248ce19ebede5741c845d31f4ee801f0389d2b2d9893879c538e944b98465416548aa1e4aa89444aa1db1a9314bf581119629e3e9bbd25a1b09cb1fc0
- TLSH T1143164003EFC0628F3F7DE7680BF571089BBB8568E60CA2E0141860D1432A01E27BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.